SecondNature privacy notice · September 7, 2026
Keep the meaning.
Respect the privacy.
SecondNature is operated by NorthPath Strategies. This notice explains how information is handled in the app and on this website.
Information you choose to add
We process your account email and sign-in identifier, the profile and household details you enter, preferences, notes, important dates, contacts you choose, plans and your reflections. These details help you remember what matters and manage arrangements. Only add information you are entitled to use.
If you use Sign in with Apple, we keep an encrypted authorization credential so we can request revocation when you delete your account. The credential is erased with your account. If Apple cannot complete revocation, account deletion still proceeds and the app provides instructions for removing the connection in your Apple Account settings. Provider access tokens are excluded from the app’s saved sign-in session.
When you connect a supported calendar, the app requests read-only access and uses the calendars you select. The planning cache contains event titles and timing for a limited upcoming window. We do not use calendar event descriptions or request calendar write access. Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Optional reminders use a device notification identifier. We encrypt the identifier on our server and use Expo, Apple Push Notification service and, on Android, Firebase Cloud Messaging to route reminders. Push messages contain a generic prompt to open SecondNature; they do not contain names, notes, plan details or calendar information. You can turn reminders off in the app or your device settings. Signing out detaches the account from reminders when the device can reach our service. A notification already in transit may still arrive; delivery expires after 30 minutes.
Clear boundaries
SecondNature does not ingest your partner’s messages, email, photos, social accounts or location. It does not require her to create an account. Raw audio is not uploaded to our servers. We do not sell personal information or use it for targeted advertising.
AI suggestions and service providers
When you request AI assistance, the relevant text and selected planning context are processed by Anthropic through Vercel AI Gateway. Requests require zero-data-retention routing and prohibit prompt training. Suggestions can be wrong; review them before accepting them. A note becomes a saved fact only after your action.
Supabase hosts account authentication and the app database. Vercel hosts the app services and this website. Expo provides mobile build and distribution services; Apple and Google handle their sign-in and app distribution services. SendGrid delivers requested sign-in emails. Connected place, weather and calendar services receive the information needed for the requested lookup or connection.
When available, venue lookups use Google Maps Platform. We retain Google Place IDs so you can reopen a venue. Names, addresses, coordinates and other Google venue details are fetched for the current view and are not saved in your plans, AI records or mobile storage. Google venue content is not sent to the AI model. Google handles this information under its Privacy Policy. Weather lookups use the planned venue location, rather than tracking your device location.
We retain validated AI results and structural audit information in your private account to explain suggestions and investigate failures. Service providers may retain limited usage, security and operational metadata under their own policies.
Protecting and keeping information
To find slow or confusing steps, the app sends anonymous interaction timings and whether a step completed, failed or was cancelled. These measurements contain no account, device or record identifiers, entered text or error messages. We store only daily counts grouped by the type of step and a broad duration range, for up to 90 days. They are not linked into individual activity histories.
App requests use encrypted connections. Database access is scoped to the signed-in account. Contact phone numbers and saved integration credentials are additionally encrypted before database storage. Access is limited to operating, supporting and securing the service.
We keep active account information while your account is in use, unless you delete it or request erasure. Deletion removes active personal records and account sessions. Rotating database backups can retain deleted records for up to seven days; provider security and operational logs have separate retention schedules. Non-identifying aggregate usage and cost totals may remain.
Your choices
You can review proposed facts before accepting them, correct information you entered, choose whether to connect a calendar, and disconnect an integration. You can delete your account in Settings or request account deletion without the app. Removing a saved fact from future suggestions keeps its inactive history until account deletion. Contact us to request access, correction or deletion, or to ask about information concerning you that another user entered.
Deleting your account does not undo messages, reservations or other actions you confirmed in external apps. Those services handle their own data and cancellation policies.
Website and audience
This website does not install advertising or analytics trackers. Hosting providers process ordinary request information needed to deliver and secure the site. SecondNature is intended for adults aged 18 and over.
Changes and contact
We update the date on this notice when it changes and provide notice of material changes as appropriate. For privacy questions or requests, email privacy@northpathstrategies.org. For help with the app, visit Support.